http://handlers.sans.org/tliston/ThwartingVMDetection_Liston_Skoudis.pdf
slightly off topic, but I know some people are running pfSense in a
virtual machine, some for testing but maybe some for a live firewall.
this whitepaper has some important ideas about this!
